BugRater
Early access: this site has moved to bugrater.com.

Security releases

Microsoft

August 2026 Early Security Updates

2026-Aug Aug 6, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Aug, revision 2026-08-06T07:00:00Z). 20 vulnerabilities, 19 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Aug
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

724 lines
All 724 CVEs 724 Additional recognition 0 Unclaimed only
Showing 301–350 of 724 · page 7 of 15
CVE-2026-70312 BR2026-0000-005585 unclaimed
Powerpoint Information Disclosure Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-70311 BR2026-0000-005586 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-70313 BR2026-0000-005587 unclaimed
Microsoft PowerPoint Remote Code Execution Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-70310 BR2026-0000-005588 unclaimed
Microsoft Word Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-70316 BR2026-0000-005589 unclaimed
Powerpoint Information Disclosure Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-70315 BR2026-0000-005590 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-70321 BR2026-0000-005591 unclaimed
Microsoft SharePoint Remote Code Execution Vulnerability
Credited as Kn1ght
CVE-2026-70318 BR2026-0000-005592 unclaimed
Microsoft Excel Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-70314 BR2026-0000-005593 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-70317 BR2026-0000-005594 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-70325 BR2026-0000-005595 unclaimed
Powerpoint Information Disclosure Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-70320 BR2026-0000-005596 unclaimed
Powerpoint Information Disclosure Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-70323 BR2026-0000-005597 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-70322 BR2026-0000-005598 unclaimed
Powerpoint Information Disclosure Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-70324 BR2026-0000-005599 unclaimed
Microsoft SharePoint Elevation of Privilege Vulnerability
Credited as Mateusz Gierblinski with Curios
CVE-2026-70327 BR2026-0000-005600 unclaimed
Microsoft Excel Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-70328 BR2026-0000-005601 unclaimed
Microsoft Excel Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-70304 BR2026-0000-005602 unclaimed
Windows DNS Elevation of Privilege Vulnerability
Credited as Rajesh Kumar
CVE-2026-70330 BR2026-0000-005603 unclaimed
Windows DNS Elevation of Privilege Vulnerability
Credited as Rajesh Kumar
CVE-2026-70335 BR2026-0000-005604 unclaimed
GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
Credited as Tarek Nakkouch
CVE-2026-70336 BR2026-0000-005605 unclaimed
Visual Studio Code Remote Code Execution Vulnerability
Credited as William Conlon with Microsoft
CVE-2026-57104 BR2026-0000-005606 unclaimed
Azure Storage Explorer Elevation of Privilege Vulnerability
Credited as Anand (anandsreekumar.com)
CVE-2026-70340 BR2026-0000-005607 unclaimed
Azure CycleCloud Elevation of Privilege Vulnerability
Credited as XBREACH.AI TEAM with https://xbreach.ai/
CVE-2026-65806 BR2026-0000-005608 unclaimed
Azure CycleCloud Information Disclosure Vulnerability
Credited as Asaf Cohen with XBreach.ai
CVE-2026-61352 BR2026-0000-005609 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-66804 BR2026-0000-005610 unclaimed
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Credited as James Forshaw with Google Project Zero
CVE-2026-66804 BR2026-0000-005611 unclaimed
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Credited as shoodagiri with GMO Cybersecurity by Ierae Inc
CVE-2026-66804 BR2026-0000-005612 unclaimed
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Credited as Daniele Linguaglossa
CVE-2026-66804 BR2026-0000-005613 unclaimed
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Credited as Will Dormann with Vul Labs
CVE-2026-66804 BR2026-0000-005614 unclaimed
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-66804 BR2026-0000-005615 unclaimed
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-66804 BR2026-0000-005616 unclaimed
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Credited as Philip Tsukerman with Palo Alto Networks
CVE-2026-66804 BR2026-0000-005617 unclaimed
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Credited as Daniel Wade with nadsec
CVE-2026-66804 BR2026-0000-005618 unclaimed
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Credited as David Carliez with DC CyberSecurity
CVE-2026-66804 BR2026-0000-005619 unclaimed
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Credited as Thomas Klemenc
CVE-2026-66804 BR2026-0000-005620 unclaimed
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Credited as sorte
CVE-2026-66804 BR2026-0000-005621 unclaimed
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Credited as haowei yan
CVE-2026-70345 BR2026-0000-005622 unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-70345 BR2026-0000-005623 unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-70346 BR2026-0000-005624 unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-70346 BR2026-0000-005625 unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-70347 BR2026-0000-005626 unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-70347 BR2026-0000-005627 unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-70355 BR2026-0000-005628 unclaimed
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Credited as Navapon Premkasem
CVE-2026-70355 BR2026-0000-005629 unclaimed
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Credited as Thimphaching Phengphavanh
CVE-2026-70355 BR2026-0000-005630 unclaimed
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Credited as Songsit Srisura
CVE-2026-70355 BR2026-0000-005631 unclaimed
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Credited as 0x00
CVE-2026-70355 BR2026-0000-005632 unclaimed
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Credited as Jattawatt Buranasant
CVE-2026-70355 BR2026-0000-005633 unclaimed
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Credited as Supawee Foitong
CVE-2026-70355 BR2026-0000-005634 unclaimed
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Credited as P1hcn